WEBDIENSTE/rengine
1
0
Fork 0
mirror of https://github.com/yogeshojha/rengine.git synced 2026-09-23 18:24:57 +02:00
Code Issues Packages Projects Releases Wiki Activity

revert multiple target imports

Browse Source
This commit is contained in:
Yogesh Ojha
2023-04-11 09:45:31 +05:30
parent 984a2ac377
commit 5ea7811fde
1 changed files with 200 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
web/targetApp/templates/target/add.html
+200 -4
View File
@@ -25,8 +25,18 @@ Add or Import Targets
<div class="card-body">
<ul class="nav nav-tabs nav-bordered">
<li class="nav-item">
<a href="#add-multiple-tab" data-bs-toggle="tab" id="main-tab" aria-expanded="false" class="nav-link active">
Add targets
<a href="#pills-add" data-bs-toggle="tab" aria-expanded="false" class="nav-link active">
Add Target
</a>
</li>
<li class="nav-item">
<a href="#ip-address-tab" data-bs-toggle="tab" aria-expanded="true" class="nav-link">
Add IP Address
</a>
</li>
<li class="nav-item">
<a href="#add-multiple-tab" data-bs-toggle="tab" aria-expanded="false" class="nav-link">
Add Multiple Targets
</a>
</li>
<li class="nav-item dropdown">
@@ -42,12 +52,96 @@ Add or Import Targets
</li>
</ul>
<div class="tab-content" id="pills-tabContent">
<div class="tab-pane fade show active" id="add-multiple-tab" role="tabpanel" aria-labelledby="add-multiple-tab">
<div class="tab-pane fade show active" id="pills-add" role="tabpanel" aria-labelledby="pills-add-tab">
<div class="mb-4">
<div class="row">
<form class="simple-example" method="POST">
{% csrf_token %}
<div class="row mb-3">
<div class="col-6">
<div>
<label for="simpleinput" class="form-label">Domain name</label>
{{ form.name }}
<span class="float-end"><a href="#" onclick="show_whois()" class="btn disabled" id="btn_view_whois">(View WHOIS)</a></span>
{% if form.errors %}
<div class="invalid-feedback" style="display: block;">
{{ form.errors.name|striptags }}
</div>
{% endif %}
</div>
</div>
<div class="col-6">
<label for="domainDescription" class="form-label">Description (Optional)</label>
{{ form.description }}
</div>
</div>
<div class="col-12">
<label for="domainDescription" class="form-label">Hackerone Target Team Handle (Optional)
<br>
This is used for sending vulnerability reports to Hackerone Program automatically. Team handle can be found from program url, hackerone.com/team_handle
</label>
{{ form.h1_team_handle }}
</div>
<div class="col-6">
<div class="mt-3">
<div class="form-check">
<input type="checkbox" class="form-check-input" id="fetch_whois_checkbox" name="fetch_whois_checkbox" checked>
<label class="form-check-label" for="fetch_whois_checkbox">Fetch WHOIS and domain related information</label>
<br>
<span class="text-muted">(reNgine will automatically fetch whois and domain related information if selected.)</span>
</div>
</div>
</div>
<button class="btn btn-primary submit-fn mt-2 float-end" disabled type="submit" name="add-single-target" id="add-single-target" value="submit"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-plus"><line x1="12" y1="5" x2="12" y2="19"></line><line x1="5" y1="12" x2="19" y2="12"></line></svg> Add Target</button>
</form>
</div>
</div>
</div>
<div class="tab-pane fade" id="ip-address-tab" role="tabpanel" aria-labelledby="ip-address-tab">
<form method="post">
{% csrf_token %}
<div class="row">
<div class="col-12">
<label for="importSubdomainFormControlTextarea">You can add one or more targets (IPs, URLs, domains). If you are adding multiple targets, separate them using a new line.</label>
<div class="alert alert-primary border-0 mb-4" role="alert">
Please enter your Target IP address, reNgine will look for the <b>A</b> records and resolve them to the domains.
</div>
<label for="ip_address" class="text-dark">IP Address or CIDR</br><span class="text-muted">Example: 192.168.1.1 or 192.168.1.1/24, both are supported</span></label>
<input type="text" name="ip_address" class="form-control form-control-lg" id="ip_address" placeholder="X.X.X.X">
<button class="btn btn-primary mt-2 float-end" disabled type="button" name="resolve_ip_button" id="resolve_ip_button"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-repeat"><polyline points="17 1 21 5 17 9"></polyline><path d="M3 11V9a4 4 0 0 1 4-4h14"></path><polyline points="7 23 3 19 7 15"></polyline><path d="M21 13v2a4 4 0 0 1-4 4H3"></path></svg> Resolve IP Address</button>
</div>
<div class="col-12">
<div id='all_domains_checkbox' class='mt-2 n-chk'>
<div class="form-check">
<input type="checkbox" class="form-check-input" id="select_all_ip_domains">
<label class="form-check-label" for="select_all_ip_domains">Select All Domains</label>
</div>
</div>
</div>
<div class="col-12 mt-3">
<div id="resolved_domains_div">
</div>
</div>
<div class="col-12 mt-3">
<label for="targetDescription" class="form-label">Target Description (Optional)</label>
<input type="text" class="form-control form-control-lg" id="targetDescription" placeholder="Interesting Target" name="targetDescription">
</div>
<div class="col-12 mt-3">
<label for="domainDescription" class="form-label">HackerOne Target Team Handle
<br>
This is used to send vulnerability reports to the HackerOne Program automatically. Team handle can be found from the program URL, <a href="https://hackerone.com/team_handle">https://hackerone.com/team_handle</a>
</label>
<input type="text" class="form-control form-control-lg" id="targetH1TeamHandle" placeholder="team_handle" name="targetH1TeamHandle">
<button class="btn btn-primary submit-fn mt-2 float-end" disabled type="submit" name="add-ip-target" id="add-ip-target" value="submit"><svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-plus"><line x1="12" y1="5" x2="12" y2="19"></line><line x1="5" y1="12" x2="19" y2="12"></line></svg> <span id="add_ip_target_btn">Add Target</span></button>
</div>
</form>
</div>
</div>
<div class="tab-pane fade" id="add-multiple-tab" role="tabpanel" aria-labelledby="add-multiple-tab">
<form method="post">
{% csrf_token %}
<div class="row">
<div class="col-12">
<label for="importSubdomainFormControlTextarea">You can add one or more targets. If you are adding multiple targets, separate them using new line. If the subdomain already exists, it will be skipped.</label>
<textarea class="form-control" id="addTargets" rows="8" spellcheck="false" name="addTargets" placeholder="example.com"></textarea>
</div>
<div class="col-12 mt-3">
@@ -126,6 +220,108 @@ Add or Import Targets
add_multiple_targets_btn.disabled = false;
}
});
$('#ip_address').on('change keyup',function(){
var resolve_ip_button = document.getElementById("resolve_ip_button");
var ip_addr = $("#ip_address").val();
if (/^([0-9]{1,3}\.){3}[0-9]{1,3}(\/([0-9]|[1-2][0-9]|3[0-2]))?$/.test(ip_addr)) {
resolve_ip_button.disabled = false;
}
else {
resolve_ip_button.disabled = true;
}
});
// hide all checkbox by default
$("#all_domains_checkbox").hide();
$("#resolve_ip_button").click(function(){
// get ip address
var ip_addr = $("#ip_address").val();
$('#resolved_domains_div').empty();
swal.fire({
title: `Fetching domains`,
text: `Please wait while we fetch domains associated with IP address or CIDR ${ip_address.value}`,
padding: '2em',
onOpen: function() {
swal.showLoading()
return fetch(`/api/tools/ip_to_domain/?format=json&ip_address=${ip_address.value}`, {
method: 'GET',
credentials: "same-origin",
headers: {
"X-CSRFToken": getCookie("csrftoken")
}
})
.then(function(response) {
return response.json();
}).then(function(json_data) {
if (json_data['status']) {
// #resolved_domains_div
$("#all_domains_checkbox").show();
$('#resolved_domains_div').append(`<b class='text-info'>${json_data['domains'].length} domains associated with IP Address ${ip_address.value}</b></br>`);
$('#resolved_domains_div').append(`<b>Please select the domains to import.</b>`);
$('#resolved_domains_div').append(`<div id='domains_checkbox' class='mt-2 row'></div>`);
for (var domain in json_data['domains']) {
$('#domains_checkbox').append(`
<div class="col-xl-2 col-md-4 col-sm-6 col-12">
<div class="form-check">
<input type="checkbox" class="form-check-input resolved_ip_domains" name="resolved_ip_domains" id="${json_data['domains'][domain]}" value="${json_data['domains'][domain]}">
<label class="form-check-label" for="${json_data['domains'][domain]}">${json_data['domains'][domain]}</label>
</div>
</div>`
);
}
swal.close();
// resolved_ip_domains if any is checked, then only enable add button
$(".resolved_ip_domains").change(function(){
var add_multiple_targets_btn = document.getElementById("add-ip-target");
var checked_count = $('.resolved_ip_domains:checked').length;
if (checked_count > 0) {
add_multiple_targets_btn.disabled = false;
$('#add_ip_target_btn').html(`Add ${checked_count} Targets`);
}
else{
add_multiple_targets_btn.disabled = true;
}
});
}
else{
$("#all_domains_checkbox").hide();
swal.close();
swal({
title: `Sorry, no domains associated with IP Address ${ip_address.value}!`,
type: 'error',
padding: '2em'
})
}
})
.catch(function() {
swal.insertQueueStep({
type: 'error',
title: 'Oops! Unable to fetch domains for this IP!'
})
})
}
});
});
// if select all checkbox is checked, select all domains
$("#select_all_ip_domains").click(function () {
$(".resolved_ip_domains").prop('checked', $(this).prop('checked'));
document.getElementById("add-ip-target").disabled = false;
var checked_count = $('.resolved_ip_domains:checked').length;
$('#add_ip_target_btn').html(`Add ${checked_count} Targets`);
});
$('#domainName').on('change keyup',function(){
if ($('#domainName').val().length) {
$("#add-single-target").removeAttr("disabled");
$("#btn_view_whois").removeClass("btn disabled");
}
else{
$("#add-single-target").prop("disabled", true);
$("#btn_view_whois").addClass("btn disabled");
}
});
});
function showname (file, id) {